high7.5
CVE-2002-2043
SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote attackers to execute arbitrary SQL comman…
Impact
SQL injection vulnerability in the LDAP and MySQL authentication patch for Cyrus SASL 1.5.24 and 1.5.27 allows remote attackers to execute arbitrary SQL commands and log in as arbitrary POP mail users via the password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cyrus | Sasl | Versions 1.5.24, 1.5.27 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0020.html
- http://www.iss.net/security_center/static/8748.php
- http://www.securityfocus.com/bid/4409
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0020.html
- http://www.iss.net/security_center/static/8748.php
- http://www.securityfocus.com/bid/4409